Dear Devolutions server support,
we are trying to upgrade our DVLS from version 2019.1.20.0 towards 2021.2.10.0. After the upgrade some users lost their private faults and the following error was logged:
DevolutionsCryptoException - NativeError : InvalidSignature
===Original Message===
Exception of type 'Devolutions.Cryptography.DevolutionsCryptoException' was
thrown. ===Original StackTrace===
at Devolutions.Cryptography.Utils.HandleError(Int64 errorCode)
at Devolutions.Cryptography.Managed.Decrypt(Byte[] data, Byte[] key, ILegacyDecryptor legacyDecryptor)
at Devolutions.Cryptography.Managed.DecryptWithKeyAsUtf8String(String b64data, Byte[] key, ILegacyDecryptor legacyDecryptor)
at Devolutions.Server.ConnectionManager.DecryptDataAtRest(Guid contextId, String value, String context)
User Vault: c870fa2a-6775-4d6f-bb82-f7d6eb45283b, Data: ndSvXryez/9EPklKxj8TFAILVDn...
I read a similar issue here on the forum and the solution was to regenerate the encryption keys.
I am now trying the genereate the encryption keys via DPS console v 2021.2.14.0 for the DVLS version 2019.1.20.0 (not yet upgrade). While doing so it get the following message: Regenerating encryption keys...
Invalid column name 'ConsoleInfo'.
Stopping Application Pool...
Stopping scheduler service...
Logging off all sessions...
Creating new encryption config...
ReEncrypting PAM Credentials...
Invalid column name 'EncryptedSudoPassword'.
Invalid column name 'EncryptedOtpSettings'.
Encryption Keys Regeneration failed. Please manually restore the database and restart the app pool and scheduler service.
How can i resolve this issue?
RFC-2021081198 RDM - Upgrade RDM omgeving-Fase1_incident.docx
Hello,
First of all, with the older DVLS versions, it's very important to use the same Console version as the DVLS instance version. As console 2021.2.14 is expecting columns EncryptedSudoPassword and EncryptedOtpSettings that don't exist in your database, the operation failed. So to manage your 2019.1.20 instance, please uninstall the DVLS Console and reinstall this one.
https://cdn.devolutions.net/download/Setup.DPS.Console.2019.1.20.0.exe
As the reencryption failed, you need to restore the database and the DVLS web application folder.
The DevolutionsCryptoException error you got seems related to the Security Provider. Using the DVLS Console version 2019.1.20, switch the instance to offline using the Go Offline button on the toolbar. Then set the Security Provider to Default
If there is still an issue, please open a ticket at service@devolutions.net and we will send you a link to book a support session.
Best regards,
Érica Poirier